---
title: Advanced
slug: advanced
docTags: 
createdAt: 2026-01-14T12:30:20.627Z
---

:::hint{type="info"}
Navigate to the sidebar menu: [Protection](docId\:AOavaXBxIc2KMEjwXC3Pi)**  **> [Policies](docId\:i3Yd_tV8604vQf9JT7_CC), open a **Standard Policy**, and select the** Advanced** tab in the top navigation bar.
:::

## Overview

The **Advanced** module allows you to configure specific technical parameters to further harden your network security. Unlike the category-based filters, these settings target specific DNS behaviors and evasion techniques used by advanced threats or users trying to bypass your policies.

## Interface Overview

The interface is streamlined into individual **configuration cards**, each representing a specific security feature. Unlike the list views in other modules, these settings are presented as distinct functional blocks for quick activation.

## Understanding the Settings

Use this guide to understand the specific impact of each advanced setting.

| Feature                               | Function & Security Benefit                                                                                                                                                                                        |
| ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Block DNS Leaks**                   | Blocks third-party **DoH **(DNS over HTTPS) and **DoT** (DNS over TLS) services. Browsers and malware often use these encrypted protocols to bypass your local DNS filters and hide their traffic.            |
| **Block resolution on malicious IPs** | Blocks threats by cross-referencing the destination IP address. Even if a domain name is brand new or not yet categorized, this feature will block it if it resolves to a server IP known to host malware.         |
| **Block parked domains**              | Blocks "parked" domains—websites that have no content other than ads or placeholder text. These are often used for <br />**typosquatting** (fake versions of popular sites), spam, or future malware distribution. |

## Configuration & Logic

Configuring these settings follows the standard toggle logic of the platform:

- **Toggle ON (**<font color="#1174db">**Blue**</font>**):** The protection feature is **ACTIVE**.
- **Toggle OFF ():** The protection feature is **DISABLED**.